Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WpCCnjmQHQuATfDNjRiwKKuYFN4.roa
File: WpCCnjmQHQuATfDNjRiwKKuYFN4.roa (raw, json)
Hash identifier: ODaOidFNuGMVQHjBLrFT4nPj0D5GzH/fVhfT1+iB6Z4=
Subject key identifier: 5A:90:82:9E:39:90:1D:0B:80:4D:F0:CD:8D:18:B0:28:AB:98:14:DE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 343E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WpCCnjmQHQuATfDNjRiwKKuYFN4.roa
Signing time: Fri 29 Mar 2024 05:52:04 +0000
ROA not before: Fri 29 Mar 2024 05:52:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13374 (0x343e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 05:52:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5A90829E39901D0B804DF0CD8D18B028AB9814DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:f8:15:9b:11:f4:48:fe:fc:7e:28:5d:df:
72:65:df:d6:15:5e:34:28:59:e3:5f:68:92:26:91:
e3:d0:4d:17:9f:af:94:67:14:38:47:20:0e:52:f5:
8c:48:1e:b6:16:2f:cc:3a:2d:2f:0c:65:f1:12:11:
04:4b:83:8d:b1:c6:e6:fc:68:b9:b5:71:dd:25:21:
38:6d:c9:ee:03:2f:d2:83:db:85:09:e5:1b:44:08:
c5:e9:91:a6:e0:32:e1:36:62:fa:c7:91:4d:b4:0a:
59:f5:1a:c1:18:da:63:bc:d8:1c:27:c0:bb:ec:dc:
55:6e:e2:56:cc:02:12:72:77:99:13:0a:b1:29:66:
38:59:96:27:0a:ff:75:7d:7a:71:fb:dc:77:86:37:
2d:f5:3d:9e:fd:50:5c:70:2e:79:90:3c:f5:42:65:
4c:59:66:80:2a:53:d4:9e:28:9c:a6:19:b4:fa:28:
68:77:76:f9:02:20:27:9e:40:f2:87:f6:22:a9:25:
40:2e:cb:f9:e0:b3:23:37:7f:ab:72:68:0c:d6:da:
a4:34:78:3b:87:cf:d3:10:9a:9f:0d:93:53:ca:c4:
11:be:80:69:56:3d:25:e9:fb:5a:09:02:ae:52:3c:
04:d2:ff:1a:c7:01:95:86:41:a2:0e:b6:71:b4:f1:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:82:9E:39:90:1D:0B:80:4D:F0:CD:8D:18:B0:28:AB:98:14:DE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WpCCnjmQHQuATfDNjRiwKKuYFN4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:ec:78:13:45:c7:b1:e4:bd:22:50:f4:c6:a4:3e:b8:f1:6f:
81:3d:ed:81:2f:d1:67:97:cd:0f:ff:b1:1e:36:64:6a:85:aa:
3e:c6:3d:70:7d:fd:7a:d9:27:94:2f:14:0c:64:fb:81:0a:a8:
02:93:29:b0:65:c0:b4:97:eb:b6:94:87:2a:ce:17:5d:28:e6:
f8:f4:dc:15:d4:75:6d:d4:b6:4c:57:3f:b7:50:ae:ae:85:d8:
5c:1e:ea:dd:0e:83:4f:e9:4a:a5:bf:82:4c:d4:60:e5:ff:9d:
e7:0a:f2:1b:35:46:b8:d9:f2:66:50:3b:fb:9a:86:49:b7:e8:
db:db:38:cc:64:4b:ad:8b:8a:dd:5f:84:53:ed:ff:20:ed:c9:
a8:7d:cd:ad:ef:c4:b9:f8:0f:24:dd:e0:83:71:d2:6b:3e:85:
f0:3f:1b:7c:38:82:5c:b1:d3:56:4d:b8:60:de:8f:3f:02:76:
67:2a:4f:59:31:dc:dd:95:75:07:db:86:b2:f3:0c:2e:92:44:
12:b2:bd:8e:f6:2f:e5:52:89:6b:d7:98:e3:9c:6e:36:c0:c1:
fd:4b:df:86:08:57:17:55:49:ee:66:ba:25:3d:3c:71:93:67:
6e:12:c7:9a:5a:18:75:31:4a:46:4d:ae:69:67:f4:eb:a3:0a:
2b:bf:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:48 2024 by rpki-client on console-ams.rpki-client.org